how to write paxctl MPROTECT-safe JIT code?

[Thomas Klausner]

I've filed some upstream bug reports about paxctl issues, some existed
already.

One developer asks how to fix the issue:

https://bugs.exim.org/show_bug.cgi?id=1749

Can someone please help out here?
 Thomas